This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json) Hash identifier: Syr3ryUqLtNPdNX2atuoNbHvtuT/l080hy7W8fuZr/o= Subject key identifier: B1:94:EB:4E:83:4C:0E:D3:25:B1:7A:35:E7:51:48:84:4F:EB:2D:1A Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee Certificate serial: 019B44A5E536305830304A802DBA4EC109B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft Manifest number: 090E Signing time: Mon 22 Dec 2025 06:01:21 +0000 Manifest this update: Mon 22 Dec 2025 06:01:21 +0000 Manifest next update: Tue 23 Dec 2025 06:01:21 +0000 Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: oRLp+LpLKO5A76QGVWrQbQUSeZKcKIXB20IfBvGUXgo=) 2: pWMenEyK3oj7AZ6h81KI2eooBIo.roa (hash: 6KZd57Ad66QVQkNRU3497fAssJrDtYq8EPVr4qqDMKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:e5:36:30:58:30:30:4a:80:2d:ba:4e:c1:09:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee Validity Not Before: Dec 22 06:01:21 2025 GMT Not After : Dec 23 06:01:21 2025 GMT Subject: CN=b194eb4e834c0ed325b17a35e75148844feb2d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:1d:e6:de:a8:b2:c4:2c:cf:0e:ed:a5:67: c9:f0:33:03:ba:c1:42:94:58:d0:7c:3a:62:f2:06: a6:64:53:93:2e:06:12:39:d6:f8:db:11:d5:70:84: 58:c5:f7:e0:4b:4c:6f:9b:6c:ce:ba:9c:a4:e8:9b: 14:ff:99:da:90:97:9e:c4:66:71:62:7a:fd:0f:f6: 6d:ad:cb:0e:fa:36:06:cb:d1:28:d6:f9:e7:05:d8: 82:b1:0b:e9:54:ee:25:38:da:3b:48:2e:34:8a:2c: 69:48:2f:d2:04:42:0c:48:af:08:a9:8a:1b:0e:b5: 6d:b1:9a:c3:10:dd:b7:4b:65:b3:f3:1e:b3:b6:79: 3a:0f:4c:a8:37:5d:eb:47:20:cc:7a:78:d5:6f:d0: 2f:ee:6a:45:62:fd:e7:a1:70:ab:6d:d6:7d:0c:01: ae:52:c3:8b:85:24:ca:36:0c:48:c7:34:1b:14:b9: 32:df:c2:96:14:bd:76:29:0d:d8:21:83:1f:af:50: 90:a5:9d:72:6e:89:9f:12:06:eb:d3:46:96:a1:c9: 49:61:83:8e:d9:2e:ab:16:2c:25:fd:7a:60:ac:f2: fa:73:48:23:52:33:aa:6a:21:74:9b:87:42:c7:07: 16:24:4c:0b:46:c7:3d:0f:0a:df:d0:79:d8:ec:13: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:EB:4E:83:4C:0E:D3:25:B1:7A:35:E7:51:48:84:4F:EB:2D:1A X509v3 Authority Key Identifier: keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:34:0f:59:b2:8f:cf:27:ba:76:1c:dd:ac:7d:61:53:fd: d8:5c:86:15:e8:a7:8b:8f:33:88:cf:b0:5f:bb:1e:5a:6e:a6: dc:83:31:cb:61:50:3d:38:aa:44:73:bf:4e:aa:65:8e:a4:b2: 74:4c:ed:8a:8c:12:fa:ca:2a:f8:de:23:1f:e2:0e:b2:9f:45: 7e:35:d1:1b:eb:39:de:69:35:6e:4e:10:15:62:9b:76:bb:8b: 6a:8f:4a:cb:2c:4d:58:74:e4:59:2e:4a:ac:f9:57:f1:b4:f0: ca:de:54:1d:8e:1f:67:8b:e4:cf:9c:c6:74:55:b6:2a:c8:01: c2:5d:95:41:ec:36:58:c1:56:28:c4:9a:95:f7:b6:0a:29:0c: e0:f4:4c:ca:52:ec:98:5f:d3:52:06:a7:80:3f:fc:0e:08:1d: ce:2e:96:c8:0d:f5:7a:27:70:f8:eb:f7:cc:46:ea:53:0a:4b: e6:9d:58:c1:6d:73:47:df:0e:0d:fe:5a:7c:80:13:fe:8a:4c: 46:7e:e9:a0:1e:6f:15:de:d2:b1:3d:0f:54:54:b5:ed:61:e5: 67:43:95:ef:5c:65:cf:58:97:97:3b:10:70:b4:ea:e3:e9:33: 10:b7:cb:26:60:c5:b6:62:03:2d:fb:35:26:1f:0b:0d:54:79: 95:a0:cb:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpeU2MFgwMEqALbpOwQmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQ2NWFiYmM3ZWYwMDUxMjcyODg0NDQ3OTJhYjg2ZmIx NWMyZWUwHhcNMjUxMjIyMDYwMTIxWhcNMjUxMjIzMDYwMTIxWjAzMTEwLwYDVQQD EyhiMTk0ZWI0ZTgzNGMwZWQzMjViMTdhMzVlNzUxNDg4NDRmZWIyZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHMd5t6ossQszw7tpWfJ8DMDusFC lFjQfDpi8gamZFOTLgYSOdb42xHVcIRYxffgS0xvm2zOupyk6JsU/5nakJeexGZx Ynr9D/ZtrcsO+jYGy9Eo1vnnBdiCsQvpVO4lONo7SC40iixpSC/SBEIMSK8IqYob DrVtsZrDEN23S2Wz8x6ztnk6D0yoN13rRyDMenjVb9Av7mpFYv3noXCrbdZ9DAGu UsOLhSTKNgxIxzQbFLky38KWFL12KQ3YIYMfr1CQpZ1ybomfEgbr00aWoclJYYOO 2S6rFiwl/XpgrPL6c0gjUjOqaiF0m4dCxwcWJEwLRsc9Dwrf0HnY7BMnTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGU606DTA7TJbF6NedRSIRP6y0aMB8GA1UdIwQY MBaAFBEtZau8fvAFEnKIREeSq4b7FcLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2Yt NjM2ODU3ZWUxNzkyLzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2YtNjM2ODU3ZWUxNzky LzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuo0D1my j88nunYc3ax9YVP92FyGFeini48ziM+wX7seWm6m3IMxy2FQPTiqRHO/TqpljqSy dEztiowS+soq+N4jH+IOsp9FfjXRG+s53mk1bk4QFWKbdruLao9KyyxNWHTkWS5K rPlX8bTwyt5UHY4fZ4vkz5zGdFW2KsgBwl2VQew2WMFWKMSalfe2CikM4PRMylLs mF/TUgangD/8Dggdzi6WyA31eidw+Ov3zEbqUwpL5p1YwW1zR98ODf5afIAT/opM Rn7poB5vFd7SsT0PVFS17WHlZ0OV71xlz1iXlzsQcLTq4+kzELfLJmDFtmIDLfs1 Jh8LDVR5laDLPA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:32:04 2025 by rpki-client